MobaXterm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MobaXterm.exe
Size

13.2MB
MD5

bf2a4dd4ce5460619fc06598331e09fc
SHA1

8ab85212717c5cfcf94bf6e65af4a01b22a92fe3
SHA256

0233cfde67a859e82e35dd9ccc3b6b9536d99f9dda04dc625985fa9d1cd5ecc3
SHA512

6a8e3bba9562734ec173705f96c0aa9981eed9d146adcb9eed4e4661faca9c88b5ce49b59adaec1e9c4901bf9fc607aeb22d00780e4c4c67763aa4e9156c7856
SSDEEP

196608:u96otEmKakt0ZWMwmlbR0Gj4qyPL9iX68ZgYe/RJ/0wW9sZHYycPdNGRrz:HuWyV/jlgZw/gr9hJHY/PMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MobaXterm.exe

Files

MobaXterm.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 162KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ